Your data, in plain English.

1. Who we are

Launchweb Durham designs, builds, and hosts websites for small businesses in and around Durham, North Carolina. In this policy, "we," "us," and "our" mean Launchweb Durham. "You" means anyone visiting this website or getting in touch with us.

For anything in this policy, including any request about your personal data, contact us at team@launchwebdurham.com or call (984) 224-7598.

2. Information we collect

Information you give us directly

When you contact us about working together, you decide what to tell us. Typically that's your name, email address, business name, phone number, and whatever you write about your business and what you need. If we go on to work together, we'll also handle the material you send for the build — logos, photos, copy, opening hours, prices, and the login details needed to connect a domain or a booking tool.

How the contact form actually works

Worth being precise, because it's unusual: the form on our home page does not submit anything to a server. When you press the button, your browser assembles what you typed into a pre-filled message and hands it to your own email app. Nothing is transmitted to us, stored by us, or seen by anyone else until you review that message and press send yourself. If you close your email app instead, we never receive anything and no record exists.

Information collected automatically when you visit

This site is hosted on Cloudflare. Like every web host, Cloudflare's servers automatically process basic technical information in order to deliver the page and keep the service secure and available. That includes your IP address, browser type and version, the page requested, referring page, and the date and time. We use this only in aggregate, for security and reliability. We do not use it to build a profile of you, and we do not combine it with anything else to identify you.

Cookies and tracking: none

We do not set cookies. We do not use Google Analytics or any other analytics product. We do not use advertising pixels, session recording, heatmaps, or fingerprinting. Every font, image, style, and script on this site is served from our own domain, so no third party is contacted when you load the page and no third party learns that you visited. This is why you were not asked to accept a cookie banner: there is nothing to accept.

If we ever add privacy-respecting analytics, we will update this policy and note the change date before turning it on.

3. Why we use your information, and our legal bases

• To reply to you and quote your project. Where the UK/EU GDPR applies, our basis is taking steps at your request before entering a contract, and our legitimate interest in answering people who contact us.
• To carry out work you've hired us for — designing, building, launching, hosting, and supporting your site. Basis: performance of our contract with you.
• To keep this site secure and working. Basis: our legitimate interest in preventing abuse and keeping the service available.
• To meet legal, tax, and accounting obligations. Basis: compliance with a legal obligation.

We do not use your information for automated decision-making or profiling, and we do not send marketing emails to people who haven't asked for them.

4. Who we share it with

We do not sell your personal information. We do not share it for cross-context behavioural advertising. We don't trade, rent, or hand it to data brokers.

We do rely on a small number of service providers to operate, and they process data strictly on our instructions:

• Our website host (Cloudflare), which serves this site and processes the technical request data described above.
• Our business email provider, which receives and stores the emails you send us.
• Providers you ask us to set up on your behalf during a build — for example a domain registrar, a booking system, or a mapping or forms tool. We'll tell you which ones before we connect anything.

We may also disclose information if the law requires it, or where it's necessary to establish or defend legal claims.

5. Data belonging to our clients and their customers

When we build or host a site for a client, that client's own visitors and customers may submit information through it. In that situation the client is the data controller and we act as their processor: we only handle that data to provide and support the site, we don't use it for our own purposes, and we don't sell it. If you're a customer of a business whose site we built and you want your data corrected or removed, contact that business directly — they control it. You're welcome to email us and we'll help route the request.

6. How long we keep things

• Enquiries that don't become projects: kept while we're in conversation and generally deleted within about 12 months.
• Client project records: kept for the life of the working relationship and for a reasonable period afterwards, so we can support a site we built and handle any dispute.
• Invoices and financial records: kept as long as tax and accounting law requires.
• Host request logs: retained by our host on their own short rolling schedule; we don't keep our own copy.

7. Your rights

Wherever you live, you can ask us to show you what we hold, correct it, delete it, or stop using it. We'll do our best to sort it out quickly, and we won't charge you or treat you differently for asking.

Depending on where you live you may have specific statutory rights:

• UK and EU (GDPR): access, rectification, erasure, restriction, objection, portability, and the right to withdraw consent at any time. You can also complain to your local supervisory authority, though we'd appreciate the chance to fix it first.
• California (CCPA/CPRA): the right to know, delete, correct, and opt out of sale or sharing. We don't sell or share personal information, so there is nothing to opt out of. You also have the right not to be discriminated against for exercising these rights.
• Other US states with comprehensive privacy laws generally grant similar rights, and we'll honour them on the same terms.

To exercise any of this, email team@launchwebdurham.com and tell us what you want done. We may need to confirm your identity before acting, particularly on a deletion request. We'll respond within 30 days, and sooner where the law requires it.

8. Security

This site is served over HTTPS with strict transport security and a content security policy that blocks third-party code from running on the page. Access to email and client project material is limited to the people who need it. No system is perfectly secure, but because this site collects nothing and stores nothing, there is very little here for anyone to take.

9. Children

Our services are for businesses, and this site isn't aimed at children. We don't knowingly collect personal information from anyone under 13. If you believe a child has sent us information, email us and we'll delete it.

10. Visitors from outside the United States

We're based in Durham, North Carolina, and any information you send us is handled in the United States, which may have different data protection rules than your home country. If you contact us from elsewhere, you're sending it to us here.

11. Changes to this policy

If we change how we handle data, we'll update this page and change the date below. Material changes will be summarised at the top of the page so you don't have to re-read the whole thing to spot what moved.

---